The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill references official base images from established registries (e.g., Docker Hub, Google Container Registry) and standard GitHub Actions from trusted organizations (GitHub, Docker, Aqua Security) in its CI/CD examples. These are well-known services and their inclusion follows standard development practices.
[PRIVILEGE_ESCALATION]: The skill demonstrates best practices for security hardening by providing specific instructions to create non-root users and groups (e.g., addgroup, adduser) and switching to them using the USER instruction to minimize the container's attack surface.
[COMMAND_EXECUTION]: The skill includes instructions for standard development tools such as docker build, docker history, and dive. These commands are strictly related to the skill's primary purpose of building and analyzing container images.
[DATA_EXFILTRATION]: The skill promotes safe data handling by including a comprehensive .dockerignore template that explicitly excludes sensitive files such as .env, .git, and IDE configuration folders, preventing accidental inclusion of secrets in image layers.

dockerfile-optimizer